RHSA-2025:4408HighCVSS 7.3

Red Hat Security Advisory: OpenShift Container Platform 4.12.76 security and extras update

Published
May 8, 2025
Last Modified
August 2, 2026

🔗 CVE IDs covered (1)

CVE-2025-27516 →

📋 Description

CVE-2025-27516 — jinja2: Jinja sandbox breakout through attr filter selecting format method

🎯 Affected products42

  • Red Hat OpenShift Container Platform 4.12
  • openshift-tech-preview/metallb-rhel8@sha256:798e60e117dc0c8d10191a5e4a7d74acfe342a5f79777938e4e92db87f7a8929_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-event-proxy-rhel8@sha256:5778a102f8361e9c7489d6d5fb6b69a6c50bfaf745d598bfd4da48ed64fbf3c9_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/frr-rhel8@sha256:f03618d603dc984ab9a2b9ee4465869be915b1af424acd67c80d9b9fb29aee9e_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:ccbd261293cba8c6ac4fbc70b998bccf3df5ae6d1376b8e3a058a9a61a23c9c2_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/metallb-rhel8-operator@sha256:ff4f3a9d196915ff3368b61d9a729e2cb033cebbb79912de46098baa094218e9_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/metallb-rhel8@sha256:798e60e117dc0c8d10191a5e4a7d74acfe342a5f79777938e4e92db87f7a8929_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-ansible-operator@sha256:46c30b6fd3b0c58582325ad007e06307144781ed16ed958825762ab6d32c32d2_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:717f0ef90664b91299827d2ba63008b14c1c35361b9d27af5dd0132449aa29e3_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:fe8f31e9ab99130065f004bcaf99962380b7831f05fb52aa926f9d1a7b83e911_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-cloud-event-proxy-rhel8@sha256:5778a102f8361e9c7489d6d5fb6b69a6c50bfaf745d598bfd4da48ed64fbf3c9_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-cloud-event-proxy@sha256:5778a102f8361e9c7489d6d5fb6b69a6c50bfaf745d598bfd4da48ed64fbf3c9_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-cluster-capacity@sha256:c13ca498134838df1e0503c965f7e97b5f5d4954b41162553d5b0bb467ca96fb_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-cluster-nfd-operator@sha256:f988abd875198a754162eb58d88d204c04e61df9648b07abc32a7a8144942a3d_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:878d9c0b562ce0b100bc3cd8d4ed158745b4a3e4909bcd4a497936219e087e64_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-clusterresourceoverride-rhel8@sha256:cc6a83695966518acd2c8f6fdaa0d1f31029ea1199fe231880bbe9cb10e11d90_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-contour-rhel8@sha256:c1bc04c491076ddc2c63b62c8133593feea3266271cf49d2517d010a74dd44da_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:3265c5298ffcff3e922ab397df23447d0c0ccd69882df3b77393269da46f82e5_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-egress-dns-proxy@sha256:f6047c52c79301541a53c6b46963b0960c455d007b403e0f709eaac6f7e2b23b_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-egress-http-proxy@sha256:5d40f09eb29775a64d059cb9b02a93fe4a0128c06cb3690756334c0b0db1ce2e_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-egress-router@sha256:75f8b42c27f3d13e416f95680bf9ca221a90172083876d66eb00c5de979706b5_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:f9380895972a1362d2fce6394bf5952ea1517f4f43a5670ec04fc1e3cbca4abc_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:d5ad3f691967138bed0824a3f523caeea3e20ec8dc63874d3fd8db856ac42599_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-helm-operator@sha256:c8a2c96d2f80306c4e0f12e52f231d4892ddc0fa09ac5bf64399507fd79dbc75_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:ad218406ce14565a5e5945b139ea605d0971335c9f44d729c4845c4ee52b06fe_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-local-storage-diskmaker@sha256:4507ad38497fe51660fb57a8731900a6f97f76341f372e6667b6f55b9ea9af06_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-local-storage-mustgather-rhel8@sha256:f88dbf6c8061a6104b81c19e0d92bde66d5f7c286c280e2b89e679c6b93b028a_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-local-storage-operator@sha256:cfa2b822a6805ccb10b77e7a46f6ac85e30ba6cdb8bcac9cee3c53a42ffd6eb8_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-node-feature-discovery@sha256:62b003061362514fdeb95b4405efe40cdaa7235ff2b289171b48da694ea8474e_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-operator-sdk-rhel8@sha256:ace47e5568655a2e95826f04518e72e955d9ee5485850e8c1b7e3e063e1afeef_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • +12 more not shown

✅ Remediation

For OpenShift Container Platform 4.12 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes

🔗 References (4)